Security Basics mailing list archives

Re: Spamarrest


From: "Melita Hoffman" <oriongal () bellsouth net>
Date: Tue, 29 Oct 2002 12:35:03 -0600

Actually, it sounds like what SpamCop does as well.  If the user has their
filters set to 'whitelist' and also to allow outsiders to release their own
emails, then the person who sends email to the SpamCop user will get a
release message similar to the one you posted.  I know I don't use it
myself, I have mine set to whitelist and manual release (meaning I have to
log in and review it myself before 'releasing' it to the address it forwards
to).  Some people on the anti-spam NG's feel like such release messages are
themselves spam - I personally just think they are potentially annoying so I
don't use them.

I know absolutely nothing about SpamArrest, but I do know that SpamCop has a
similar feature and that it definitely isn't for addy-harvesting purposes.
It's just so that you can send email to someone with a spamcop addy even if
you aren't on their whitelist, and the extra step is just a spambot-foiler.

Melita

----- Original Message -----
From: "Adam Shephard" <adams () firstfederalbanking com>
To: <security-basics () securityfocus com>
Sent: Monday, October 28, 2002 1:18 PM
Subject: Spamarrest


I've received a couple of these emails recently.

Has anybody heard of Spamarrest harvesting info from those of us who click
their link?

It's not that I am suspicious of the Spamarrest folks, it's just seems odd
to me that in order to protect others from spam, we have to submit
ourselves
to a procedure that is often used to propagate it.

Even if they are completely innocent, aren't they holding up a big neon
sign
to current and would-be spammers that says "Here's how you do it!"?

Text of the email below.




----------------------------------------------------------
I'm protecting myself from receiving junk mail.
Just this once, click the link below so I can receive your emails. You
won't
have to do this again.

http://spamarrest.com/a?xxxxxxx:xxxxxx

You are receiving this message in response to your email to
xxxx () xxxxxxx com, a Spam Arrest customer.

Spam Arrest requests that senders verify themselves before their email is
delivered.

When you click the above link, you will be taken to a page with a graphic
on
it. Simply read the word in the graphic, type it into the form, and you're
verified.

You will only need to do this once per Spam Arrest customer.



Current thread: